Skip to content

Commit 9acfcf4

Browse files
josephperrottjosephperrott
authored
ci: update bazel RBE setup on CI and use trusted build configuration for upstream CI runs (#30732)
Update to use the latest bazel/configure-remote action from dev-infra and set up trusted builds for CI runs from upstream branches.
1 parent ad6a21e commit 9acfcf4

12 files changed

+108
-87
lines changed

‎.bazelrc‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -121,6 +121,9 @@ build:build-results --bes_results_url="https://source.cloud.google.com/results/i
121121
# Set remote caching settings
122122
build:remote --remote_accept_cached=true
123123

124+
# Additional flags added when running a "trusted build" with additional access
125+
build:trusted-build --remote_upload_local_results=true
126+
124127
################################
125128
# --config=debug #
126129
################################

‎.github/workflows/assistant-to-the-branch-manager.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,6 @@ jobs:
1616
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
1717
with:
1818
persist-credentials: false
19-
- uses: angular/dev-infra/github-actions/branch-manager@8a438a3bdc519880d78b5ac92b62bfe688deb058
19+
- uses: angular/dev-infra/github-actions/branch-manager@e3c0efecadda0e0fbb616abcdf447c788959ca64
2020
with:
2121
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}

‎.github/workflows/ci.material-aio.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Initialize environment
31-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
31+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
3232
- name: Install node modules
3333
run: yarn install --immutable
3434
- name: Execute Linting
@@ -38,7 +38,7 @@ jobs:
3838
runs-on: ubuntu-latest
3939
steps:
4040
- name: Initialize environment
41-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
41+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
4242
- name: Install node modules
4343
run: yarn install --immutable
4444
- name: Execute Direct Production Build (deploy usage)
@@ -50,7 +50,7 @@ jobs:
5050
runs-on: ubuntu-latest
5151
steps:
5252
- name: Initialize environment
53-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
53+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
5454
- name: Install node modules
5555
run: yarn install --immutable
5656
- name: Execute Tests
@@ -67,7 +67,7 @@ jobs:
6767
runs-on: ubuntu-22.04 # Note, fails on Ubuntu 24.04. see https://github.com/actions/runner-images/issues/10636
6868
steps:
6969
- name: Initialize environment
70-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
70+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
7171
- name: Install node modules
7272
run: yarn install --immutable
7373
- name: Execute Lighthouse Audit

‎.github/workflows/ci.yml‎

Lines changed: 45 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Initialize environment
24-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
24+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
2525
with:
2626
cache-node-modules: true
2727
- name: Install node modules
@@ -54,13 +54,15 @@ jobs:
5454
runs-on: ubuntu-latest
5555
steps:
5656
- name: Initialize environment
57-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
57+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
5858
with:
5959
cache-node-modules: true
6060
- name: Setup Bazel
61-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
61+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
6262
- name: Setup Bazel RBE
63-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
63+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
64+
with:
65+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
6466
- name: Install node modules
6567
run: yarn install --frozen-lockfile
6668
- name: Check API Goldens
@@ -75,13 +77,15 @@ jobs:
7577
runs-on: ubuntu-latest
7678
steps:
7779
- name: Initialize environment
78-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
80+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
7981
with:
8082
cache-node-modules: true
8183
- name: Setup Bazel
82-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
84+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
8385
- name: Setup Bazel RBE
84-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
86+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
87+
with:
88+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
8589
- name: Install node modules
8690
run: yarn install --frozen-lockfile
8791
- name: Run e2e tests
@@ -96,13 +100,15 @@ jobs:
96100
runs-on: ubuntu-latest
97101
steps:
98102
- name: Initialize environment
99-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
103+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
100104
with:
101105
cache-node-modules: true
102106
- name: Setup Bazel
103-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
107+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
104108
- name: Setup Bazel RBE
105-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
109+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
110+
with:
111+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
106112
- name: Install node modules
107113
run: yarn install --frozen-lockfile
108114
- name: Run integration tests
@@ -120,13 +126,15 @@ jobs:
120126
runs-on: ubuntu-latest-4core
121127
steps:
122128
- name: Initialize environment
123-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
129+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
124130
with:
125131
cache-node-modules: true
126132
- name: Setup Bazel
127-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
133+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
128134
- name: Setup Bazel RBE
129-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
135+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
136+
with:
137+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
130138
- name: Install node modules
131139
run: yarn install --frozen-lockfile
132140
- name: Run linker AOT tests
@@ -141,13 +149,15 @@ jobs:
141149
runs-on: ubuntu-latest-4core
142150
steps:
143151
- name: Initialize environment
144-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
152+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
145153
with:
146154
cache-node-modules: true
147155
- name: Setup Bazel
148-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
156+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
149157
- name: Setup Bazel RBE
150-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
158+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
159+
with:
160+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
151161
- name: Install node modules
152162
run: yarn install --frozen-lockfile
153163
- name: Run linker JIT tests
@@ -162,13 +172,15 @@ jobs:
162172
runs-on: ubuntu-latest-16core
163173
steps:
164174
- name: Initialize environment
165-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
175+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
166176
with:
167177
cache-node-modules: true
168178
- name: Setup Bazel
169-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
179+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
170180
- name: Setup Bazel RBE
171-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
181+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
182+
with:
183+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
172184
- name: Install node modules
173185
run: yarn install --frozen-lockfile
174186
- name: Run tests
@@ -185,13 +197,15 @@ jobs:
185197
runs-on: ubuntu-latest-16core
186198
steps:
187199
- name: Initialize environment
188-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
200+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
189201
with:
190202
cache-node-modules: true
191203
- name: Setup Bazel
192-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
204+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
193205
- name: Setup Bazel RBE
194-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
206+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
207+
with:
208+
google_credential: ${{ secrets.RBE_TRUSTED_BUILDS_USER }}
195209
- name: Install node modules
196210
run: yarn install --frozen-lockfile
197211
- name: Run tests
@@ -206,13 +220,13 @@ jobs:
206220
runs-on: ubuntu-latest-4core
207221
steps:
208222
- name: Initialize environment
209-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
223+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
210224
with:
211225
cache-node-modules: true
212226
- name: Setup Bazel
213-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
227+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
214228
- name: Setup Bazel RBE
215-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
229+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
216230
- name: Install node modules
217231
run: yarn install --frozen-lockfile
218232
- name: Build and Verify Release Output
@@ -237,17 +251,17 @@ jobs:
237251
runs-on: ubuntu-latest-4core
238252
steps:
239253
- name: Initialize environment
240-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
254+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
241255
with:
242256
cache-node-modules: true
243257
# See: https://github.com/puppeteer/puppeteer/pull/13196 and
244258
# https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md.
245259
- name: Disable AppArmor
246260
run: echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
247261
- name: Setup Bazel
248-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
262+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
249263
- name: Setup Bazel RBE
250-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
264+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
251265
- name: Install node modules
252266
run: yarn install --frozen-lockfile
253267
- name: Build and Verify Release Output
@@ -275,14 +289,14 @@ jobs:
275289
CI_RUNNER_NUMBER: ${{ github.run_id }}
276290
steps:
277291
- name: Initialize environment
278-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
292+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
279293
with:
280294
cache-node-modules: true
281295
- name: Install node modules
282296
run: yarn install --frozen-lockfile
283297
- name: Setup Bazel
284-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
298+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
285299
- name: Setup Browserstack Variables
286-
uses: angular/dev-infra/github-actions/browserstack@8a438a3bdc519880d78b5ac92b62bfe688deb058
300+
uses: angular/dev-infra/github-actions/browserstack@e3c0efecadda0e0fbb616abcdf447c788959ca64
287301
- name: Run tests on Browserstack
288302
run: ./scripts/circleci/run-browserstack-tests.sh

‎.github/workflows/deploy-dev-app-main-push.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Initialize environment
20-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
20+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
2121
with:
2222
cache-node-modules: true
2323
- name: Setup Bazel
24-
uses: angular/dev-infra/github-actions/bazel/setup@8a438a3bdc519880d78b5ac92b62bfe688deb058
24+
uses: angular/dev-infra/github-actions/bazel/setup@e3c0efecadda0e0fbb616abcdf447c788959ca64
2525
- name: Setup Bazel RBE
26-
uses: angular/dev-infra/github-actions/bazel/configure-remote@8a438a3bdc519880d78b5ac92b62bfe688deb058
26+
uses: angular/dev-infra/github-actions/bazel/configure-remote@e3c0efecadda0e0fbb616abcdf447c788959ca64
2727
- name: Install node modules
2828
run: yarn install --frozen-lockfile
2929

‎.github/workflows/dev-infra.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,13 +12,13 @@ jobs:
1212
runs-on: ubuntu-latest
1313
steps:
1414
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
15-
- uses: angular/dev-infra/github-actions/commit-message-based-labels@8a438a3bdc519880d78b5ac92b62bfe688deb058
15+
- uses: angular/dev-infra/github-actions/commit-message-based-labels@e3c0efecadda0e0fbb616abcdf447c788959ca64
1616
with:
1717
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
1818
post_approval_changes:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
22-
- uses: angular/dev-infra/github-actions/post-approval-changes@8a438a3bdc519880d78b5ac92b62bfe688deb058
22+
- uses: angular/dev-infra/github-actions/post-approval-changes@e3c0efecadda0e0fbb616abcdf447c788959ca64
2323
with:
2424
angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}

‎.github/workflows/google-internal-tests.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
16-
- uses: angular/dev-infra/github-actions/google-internal-tests@8a438a3bdc519880d78b5ac92b62bfe688deb058
16+
- uses: angular/dev-infra/github-actions/google-internal-tests@e3c0efecadda0e0fbb616abcdf447c788959ca64
1717
with:
1818
run-tests-guide-url: http://go/angular-material-presubmit
1919
github-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/pr.material-aio.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
runs-on: ubuntu-latest
2727
steps:
2828
- name: Initialize environment
29-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
29+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
3030
- name: Install node modules
3131
run: yarn install --immutable
3232
- name: Execute Linting
@@ -36,7 +36,7 @@ jobs:
3636
runs-on: ubuntu-latest
3737
steps:
3838
- name: Initialize environment
39-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
39+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
4040
- name: Install node modules
4141
run: yarn install --immutable
4242
- name: Execute Direct Production Build (deploy usage)
@@ -48,7 +48,7 @@ jobs:
4848
runs-on: ubuntu-latest
4949
steps:
5050
- name: Initialize environment
51-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
51+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
5252
- name: Install node modules
5353
run: yarn install --immutable
5454
- name: Execute Tests
@@ -65,7 +65,7 @@ jobs:
6565
runs-on: ubuntu-22.04 # Note, fails on Ubuntu 24.04. see https://github.com/actions/runner-images/issues/10636
6666
steps:
6767
- name: Initialize environment
68-
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@8a438a3bdc519880d78b5ac92b62bfe688deb058
68+
uses: angular/dev-infra/github-actions/npm/checkout-and-setup-node@e3c0efecadda0e0fbb616abcdf447c788959ca64
6969
- name: Install node modules
7070
run: yarn install --immutable
7171
- name: Execute Lighthouse Audit

0 commit comments

Comments
 (0)